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Introduction 



The aim of this article is to show that the arithmetic of Pell conies admits a 
description which is completely analogous to that of elliptic curves: there is a theory 
of 2-descent with associated Selmer and Tate-Shafarevich groups, and there should 
be an analog of the conjecture of Birch and Swinnerton-Dyer. For the history and 
a theory of the first 2-descent, see [HlIZIEl- The idea that unit groups of number 
fields and the group of rational points on elliptic curves are analogous is not new; 
see e.g. ^ |3 13 El for some popularizations of this point of view. It is our goal 
here to show that, for the case of the unit group of real quadratic number fields, 
this analogy can be made much more precise. 

1. The Group Law on Pell Conics and Elliptic Curves 

Let F e Y] a polynomial. If degF = 2, the affine curve of genus defined 
by F = is called a conic. Let c? be a squarefree integer ^ 1 and define 



Then the curves C : — AY^ = 4 are called Pell conics; they are irreducible, 
nonsingular affine curves with a distinguished integral point TV = (2, 0). 

If degF = 3, the projective curve E described by F has genus 1 if it is non- 
singular; if in addition it has a rational point, then E is called an elliptic curve 
defined over Q. Elliptic curves given by a Weierstrafi equation Y^ — + aX + b 
are irreducible, nonsingular projective curves with a distinguished integral point 
O = [0 : 1 : 0] at infinity. 

Both types of curves have a long history: Pythagorean triples correspond to 
rational points on the Pell conic + 4Y^ = 4, solutions of the Pell equations 
have been studied by the Greeks, the Indians, and the contemporaries of Fermat, 
such as Brouncker and Wallis. Problems leading to elliptic curves occur in the 
books of Diophantus and were studied by Bachet, Fermat, de Jonquieres, Euler, 
Cauchy, Lucas, and Sylvester before Poincare laid down his program for studying 
diophantine equations given by curves according to their genus. 

1.1. Group Law on Conics. The group law on non-degenerate conics C defined 
over a field F is quite simple: fix any rational point A'^ on C; for finding the sum 
of two rational points A,Bg C{F), draw the line through N parallel to AB, and 
denote its second point of intersection with C hy A + B. In the special case of Pell 
conics, the resulting formulas can be simplified to 

Proposition 1. Consider the conic C : Y^ ~ AX'^ — 4, and put N — (2,0). Then 
the group law on C with neutral element N is given by 



It is now easily checked that the map sending points (r, s) e C(Z) to the unit 
^+^'^ with norm 1 in the quadratic number field K — Q(\/A) is a group homo- 
morphism. Observe that the associativity of the geometric group law is equivalent 
to a special case of Pascal's theorem, which in turn is a very special case of Bezout's 
Theorem. 




d if rf = 1 mod 4, 
M if d EE 2, 3 mod 4. 
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1.2. Group Law on Elliptic curves. Given an elliptic curve E : y'^ = + ax + b 
defined over an algebraically closed field K, we define an addition law on E by 
demanding that A + B + C = ioi points A,B,C € E{K) if and only if A, B, C 
are collinear. Since vertical lines intersect E only in two affine points, we have to 
regard E as a projective curve; then vertical lines intersect E in two affine points 
as well as in the point at infinity. Associativity follows geometrically from a special 
case of Bezout's Theorem. 

2. The Group Structure 

Let us now compare the known results about the group structure of Pell conies 
over the most common rings and fields. Generally, we will study conies in the affine 
plane over integral domains, and elliptic curves in the projective plane over fields. 

2.1. Finite Fields. Let C : x^ — Ay^ = 4 be a Pell conic defined over a finite field 
¥q with q = elements, and assume that C is smooth, i.e. that p\ A. Then 

C{¥q) ~ Z/mZ, where m ~ q — ^ — ^ . 

If A is a square mod p and p is odd, this is immediately clear since there is an 
affine isomorphism between C and the hyperbolas X'^ — = 1 and XY = 1; in 
particular, one has C(Fq) ~ = GLi(F^) in this case. 
On the elliptic curve side, we know that 

E{¥g) ~ Z/riiZ e Z/naZ, 712 | ni. 

Moreover, we have ^E{¥p) = {p + 1) ~ Up, where \ap\ < 2y^ by Hasse's theorem. 

2.2. p-adic Numbers. If p is an odd prime not dividing A, then 

rz/(p-i)®Zp if(A) = +i, 

C(Z )^ j2^/b+l)®^P if (f) = -l, 
^ I Z/2©Zp if P I A 7^ -3, 

lz/6©Zp ifp = 3, A = -3. 

Reduction modulo p'^ then yields 

'Z/(p-l)®Z//-i if(f) = +l, 

C(Zh') 0, I ^/(^ + ^) ® = 

^Z/2®Z//- ifp| A^-3, 

Z/6®Z/3''-i ifp==3,A = -3. 

For elliptic curves E/Qp we have a reduction map sending Qp-rational points to 
points defined over Fp. The group Ens{¥p) is the set of all nonsingular points of 
E over Fp. The subgroups Ei{<Qp) {i = 0,1) of E{Qp) are defined as the inverse 
images of Ens(¥p) and of the point of infinity of E(¥p) under the reduction map. 
These groups sit inside the exact sequence 

> EiiQp) > EoiQp) > E^,i¥p) > 0. 

The structure of Ens{¥p) is known: if i?/Fp is nonsingular, it was discussed in 
Subsection 12.11 if E/¥p is singular, then Ens{¥p) is isomorphic to C(Fp) for a 
certain conic C, and we say that E has additive, multiplicative or split multiplicative 
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reduction if the conic is a parabola (C(Fp) ~ Fp), a hyperbola (C(Fp) ~ F^ ), or an 
ellipse (C(Fp) ~ Fp2[l], the group of elements with norm 1 in ¥p2). 

We also know hat i?i(Qp) — Zp and that the quotient group i?(Qp)/i?o(Qp) is 
finite. Its order Cp is called the Tamagawa number for the prime p, and clearly 
Cp = 1 we have for all primes p \ A. More exactly it can be shown (albeit with 
some difficulty) that Cp < 4 if has additive reduction, and that Cp is the exact 
power of p dividing A otherwise. 

2.3. Integral and Rational Points. Now let us compare the structure of the 
groups of rational points: for elliptic curves, we have the famous theorem of Mordell- 
Weil that E{Q) ~ -E(Q)tors © Z'', where £;(Q)tors is the finite group of points of 
finite order, and r is the Mordell-Weil rank. For conies, on the other hand, we 
have two possibilities: either C(Q) = (for example if C : + ~ 3) or C(Q) is 
infinite, and in fact not finitely generated (see Tan I12j). The analogy can be saved, 
however, by looking at integers instead of rational numbers: if if is a number field 
with ring of S'-integers Os, then 

C{Os) ^ C{Os)tors © E{K) ~ E{K)tors © Z'' 

where r > is called the Mordell-Weil rank. Shastri ^U] computed the rank r for 
the unit circle over number fields K and S — 0. 

Note that the group of integral points on the hyperbola XY = 1 is isomorphic 
to = GLi(i?). Number theoretic algorithms working with the multiplicative 
group of i? = li/pli in general have an analog for conies, as we will see in the next 
section. 

3. Applications 

3.1. Primality Tests. The classical primality test due to Lucas is the following: 

Proposition 2. An odd integer n is prime if and only if there exists an integer a 
satisfying the following two conditions: 

i) a"^^ = 1 mod n; 

ii) a*^"^^-'/'' ^ 1 mod 7i for every prime r \ {n — 1). 

This primality test is based on the multiplicative group (Z/nZ)^ , that is, on the 
group 7Y(Z/nZ) of Z/nZ-rational points on the hyperbola TC : XY = 1. Something 
similar works for any Pell conic: 

Proposition 3. Letn > 5 be an odd integer andC : X^ — AY^ = A a nondegenerate 
Pell conic defined over 'Ljn'L with neutral element N = (2,0), and assume that 
(A/n) = —1. Then n is a prime if and only if there exists a point P G C{'l,/n'L) 
such that 

i) {n + l)P = N; 

ii) p ^ X for any prime r dividing n + 1 . 

Of course, for both tests there are 'Proth- versions' in which only a part of iV ± 1 
needs to be factored. 

The following special case of Proposition O is well known: if n = 2^* — 1 is a 
Mersenne number, then n = 7 mod 12 for p > 3, hence (3/n) — —1; if we choose 
the Pell conic C : X^ — 12Y^ ~ 4 and and P = (4, 1), then the test above is nothing 
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but the Lucas-Lehmer test. We remark in passing that Gross [H] has come up with 
a primahty test for Merscnne numbers based on eUiptic curves. 

3.2. Factorization Methods. The factorization method based on elliptic curves 
is very well known. Can we replace the elliptic curve by conies? Yes we can, and 
what we get is the p — 1-factorization method for integers N if we consider the 
conic H : xy — I, and some pzL 1-factorization method for general Pell conies. The 
details are easy to work out for anyone familiar with Pollard's p — 1-method. 

4. 2-Descent 

Consider the Pell conic C : X'^ - AF^ = 4. Define a map a : C(Q) — > Q'^ /Q'^ ^ 

by 

^-AQ><2 if a; = -2. 

If P = {x,y) e C(Z) with x > 0, then P gives rise to an integral point on the de- 
scendant Ta{C) : aX^ — bY2 = 4, where a is a positive squarefree integer determined 
by a{P) = aQ^ ^, and ab — A. Conversely, any integral point on some Ta{C) gives 
rise to an integral point with positive x-coordinate on the Pell conic C. 

It can be shown that a is a group homomorphism, and that we have an exact 
sequence 

> 2C(Z) > C(Z) ° . Q></QX2_ 

Moreover, we have #ima — 2"", where r is the Mordell- Weil-rank of C(Z), and 
the elements of ima are represented by the first descendants 7a with 7^(Z) 7^ 0. 
Thus computing the Mordell- Weil rank is equivalent to counting the number of first 
descendants 7^ with an integral point (see 0). 

The situation is completely analogous for elliptic curves E = X{X'^+aX+b) 
with a rational point (0, 0) of order 2, except that here we also have to consider 
the 2-isogenous curve E -.Y^ — X{X^ + aX + b), where a = —2a and b — — 46. 
We have two Weil maps a : E{Q) — > Q"" /Q"" ^ and S : E{Q) — > Q"" /Q"" ^ and 
the Mordell- Weil rank is given by Tate's formula 2*"+^ = #ima • #ima. For more 
information on the descent via 2-isogenies we refer to Silverman & Tate 

4.1. Selmer and Tate-Shafarevich Group. The subset of descendants 7^ : 



ar 



2 _ 



bs^ = 4 with a rational point form a subgroup Sel2(C) of Q^/Q^ ^ called the 
2-Selmer group of C. Next we define the Tate-Shafarevich group 1112 (C) by the 
exact sequence 

1 > ima > Seh{C) > ni2(C) > 1. 

In |S] we have shown that the 2-part of the Tate-Shafarevich group of the Pell conic 
C : X2 - Ay 2 = 4 is m2(Z) ~ Cl+(fc)2[2]. 

For a cohomological definition of Selmer and Tate-Shafarevich groups, we need 
to interpret conies as principal homogeneous spaces. Every conic X^ — AY2 ~ 4c 
is a principal homogeneous space for C(Q); this is to say that the map 

M : V{Z) X C(Z) V{Z) : ^l{{u,v), {x,y)) = (H£d^, 2^). 

has the following properties: 

(1) iJ,{p, N)=p for all p e I?(Q), where N = (2, 0) is the neutral element of C. 

(2) |JL{^x{p, P), Q) = n{p, P + Q) for all p e V{Q) and aU P,Q e ~ 
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(3) For all p,qe V{q) there is a unique P e C(Q) with P) = q. 

Here Q denotes the algebraic closure of Q. 

Note, however, that only those V with c | A arc principal homogeneous space 
for C(Z), i.e., satisfy the property that for all p,q G T>{Z) there is a P € C(Z) with 
P) — q. Also observe that the conies T) with c | A can be written in the form 
aX"^ — bY"^ = 4 with ab = A, that is, these are exactly the first descendants. 

4.2. Heights. For a rational number q = ^ in lowest terms, define its height 

H{q) = logmax{|m|, note that H{0) = and H{q) > for aU g € Q. For 
rational points P = {x, y) e C(Q) on a conic C : X"^ - Ay^ = 4 put H{P) = H{x). 
Define the canonical height h{P) by 

KP) = hm 

^ ' n^oo 2" 

The canonical height h on the Pell conic C : X"^ — AY'^ = 4 has all the suspected 

properties (and more): 

(1) |/;(P)-ff(P)| <log4; 

(2) ^(T) = if and only if T e C(Q)tors; 

(3) h{mP) = mh{P) for all integers m > 1; 

(4) h{P + Q) <h{P) + h{Q); 

(5) the square of the canonical height satisfies the parallelogram equality 

h{P - Qf + h{P + Qf = 2h{Pf + 2h{Qf 

for all P.Q G C(Q). 

In addition, there arc explicit formulas for the canonical height. It is an easy 
exercise to show that every rational point on a Pell conic has the form P = {x, y) 
with a; = ^, y = ^, and (r, n) = (s, n) = 1. In this case we have 



h{P) 



llog|n| ifA<0. 



The finiteness of C{'Zs)/'^C{'Zs) and the existence of a height function implies 
the theorem of Mordell-Weil. 



5. Analytic Methods 

5.1. Zeta Functions. Both for conies and elliptic curves over Q there is an analytic 

method that sometimes provides us with a generator for the group of integral or 
rational points on the curve. Before we can describe this method, we have to talk 
about zeta functions of curves. 

Take a conic C or an elliptic curve E defined over the finite field F^; let Nr denote 
the cardinalities of the groups of Fpr- -rational points on C and E respectively, where 
we count solutions in the afBne plane for C and in the projective plane for E. Then 

Zp{T)=e^p{f^Nr^) 

r=l 

is called the zeta function oiC ov E over F„. 
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For the parabola C : y = x"^, we clearly have C(Fg) ~ F,, hence Nr = , and 
we find 

oo 



Zp(T) = exp ( ^ p'-^) = exp(- log(l - pT)) = ^ 

r=l 

For the conic — AY"^ = 4 we find after a little calculation 

1 



pT- 



(l-pT)(l-x(p)T)' 



where x is the Dirichlet character defined by x{p) = i^/p)- The substitution 
T =p~^ turns this into 

For nonsingular elliptic curves over Fp we similarly get 

where P(T) = qT'^ - a^T + 1 and is defined by #E{¥p) = p+l-ap. 

5.2. L-Functions for Conies. Now we take the zeta function for each p and 
multiply them together to get a global zeta function. The first factor 1/(1 — p^~^) 
gives us the product 



n r:^ = c(«-i)(i-2" 



p odd prime 

that is, essentially the Riemann zeta function. 

The other factor, on the other hand, is more interesting: 



is a Dirichlet L-function for the quadratic character x = {^1 ')■ This function 
converges on the right half plane Re s > 1 and can be extended to a holomorphic 
function on the complex plane. 

Now the nice thing discovered by Dirichlet (in his proof that every arithmetic 

progression ax + b with (a, 6) = 1 contains infinitely many primes) is that, for every 
nontrivial (quadratic) character L{s, x) has a nonzero value at s = 1. In fact, he 
was able to compute this value: 



h ■ if A < 0, 



h . 2l2|£ if A > 
VA 



where x.{p) = {^Ip)^ s-^d where w. A, h and e > 1 arc the number of roots of unity, 
the discriminant, the class number and the fundamental unit of Q(-\/A). 

The upshot is this: if A > 0, the group C(Z) has rank 1; by using only local 
information (numbers of Fpr-rational points on C) we have constructed a function 
whose value at 1 gives, up to well understood constants, a power of a generator of 
C(Z), namely the /i-th power of the fundamental unit. 
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The functional equation of Dirichlet's L-function allows us to rewrite Dirichlet's 
formula as 

lim s~''L{s,x) = , 

s^O W 

where r = and R = 1 for A < 0, and r = 1 and R = log s for A > 0. 

Observe that the evaluation of the L-funtion (which was defined using purely 
local data) at s = yields a generator of the free part of the group C(Z) (which is 
a global object)! 

5.3. L-Functions for Elliptic Curves. The really amazing thing is that exactly 

the same thing works for elliptic curves of rank 1: by counting the number Nr of 
Fpr--rational points on E, we get a zeta function Zp{T) that can be shown to have 
the form 

Z (T) - ^(^) 

for some polynomial P{T) G Z[T] of degree 2 (if p does not divide the discriminant 

of E). In fact, if p \ E wc have P(T) = I - a-pt + pt^, where ttp = p + 1 - #£^(Fp). 
Put Lp{s) = 1/P{p~^) and define the L-function 

L{s,E)=^Lp{s). 
p 

Hasse conjectured that this L-function can be extended analytically to the whole 
complex plane; moreover, there exists an A'' e N such that 

K{s,E) = N'/^{2Tr)-'T{s)L{s,E) 

satisfies the functional equation A(.s — 2, E) = ±A(s, E) for some choice of signs. 
For curves with complex multiplication, this was proved by Deuring; the general 
conjecture is a consequence of the now proved Taniyama-Shimura conjecture. 

6. Birch Swinnerton-Dyer 

6.1. Birch and Swinnerton-Dyer for Elliptic Curves. The conjecture of Birch 
and Swinnerton-Dyer for elliptic curves predicts that L(s, E) has a zero of order r 
at s = 1, where r is the rank of the Mordell-Weil group. More exactly, it is believed 
that 

where r is the Mordell-Weil rank of E{Q), fl = the real period, in(L;/Q) the 
Tate-Shafarevich group, R{E/Q) the regulator of E (some matrix whose entries 
are canonical heights of basis elements of the free part of E(Q)), Cp the Tamagawa 
number for the prime p (trivial for all primes not dividing the discriminant), and 
-E^(Q)tors the torsion group of E. 

6.2. Birch and Swinnerton-Dyer for Conies. We now want to interpret Dirich- 
let's class number formula in a similar way. Let k = Q(\/A) denote the quadratic 

number field associated to the Pell conic C : X"^ — AY^ = 4. Then we conjecture 
that there is a cohomological definition of the Tate-Shafarevich group ni(C) whose 
2-torsion coincides with the group 1112 (C) defined above, and that we have 

m(C) ~ 01+ (A;)^ 
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If we (preliminarily) define the Tamagawa numbers by 



V 



2 ifp|A, 
1 otherwise, 



then Gauss's genus theory implies that 

[Jcp = 2(Cl+(fc) :Cl+(fc)2). 

Thus if we put 51 = i, then Vl ■ ^III(C) ■Y\cp = h^ equals the class number of 
k in the strict sense, hence is equal to 2" • h, where u = 1 if Ne = +1, and u = 
otherwise. 

If A > 0, let 77 > 1 denote a generator of the free part of C(Z); then the regulator 
of C equals ^(77) = log?]. Now we find i?(C) = 2i""i?, hence n-#UI{C)-R{C)-l\cp = 
/i+ log?7 — 2hR; this also holds for A < if we put R = 1. 

Finally, C(Z)tors is the group of roots of unity contained in k, and we find 

2hR _ n ■ #m(c) • R{C) ■ n Cp 

W #C(Z)tors 

in (almost) perfect analogy to the Birch-Swinncrton-Dyer conjecture for elliptic 
curves. 

In fact, the analogy would be even closer if we would replace #C(Z)tors by 
(#C(Z)tors)^ and adjust the formulas for C2 and C3 for the two Pell conies with 
nontrivial torsion; this would also allow us to put = I. 



7. Summary 

The analogy between Pell conies and elliptic curves is summarized in the follow- 
ing table: 





GLi 


Pell conies 


elliptic curves 


group structure on 


affine line 


afiine plane 


projective plane 


defined over 


rings 


rings 


fields 


group elements 


S"- units 


S'-integral points 


rational points 


group structure 


Z/2©Z#^ 


C(Zs)tors®Z'- 




associativity 


clear 


Pascal's Theorem 


Bezout's Theorem 


factorization alg. 


p-1 


p±l 


ECM 


primality tests 


Lucas-Proth 


Lucas-Lehmer 


ECPP 


m 


1 


Cl+(fc)2 


? 


L-series 


Z 


quadratic field 


modular form 



Moreover, cyclotomic fields are for Pell conies what modular curves are for elliptic 
curves, and cyclotomic units correspond to Heegner points. The analog of Heegner's 
Lemma (if a curve of genus 1 of the form — f4(X), where /4 is a quartic 
polynomial with rational coefficients, has a if-rational point for some number field 
K of odd degree, then the curve has a rational point; cf. jjj) is due to Nagell 
who proved the same result with /4 replaced by a quadratic polynomial /2. 
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8. Questions 

Although the arithmetic of conies is generaUy regarded as being almost trivial, 
there are a lot of questions that are still open. The main problem is a good definition 
of the Tamagawa numbers in the case of conies, a cohomological description of the 
Selmer and Tate-Shafarevich groups, and the proof of in(C) ~ Cl^(fc)^. 

The next problem is the analytic construction of generators of CCZs) if S* 7^ 0. 
This suggests looking at the Stark conjectures, which predict that we can construct 
certain units (actually 5'-units) in number fields. It seems, however, that we cannot 
hope to find "independent" elements (see ^2). 

On a simpler level there's the question whether iterated 2-descents on Pell conies 
provide an algorithm for computing the fundamental unit that is faster than current 
methods. And how does 3-descent on Pell conies work? 

We can also think of generalizing the approach described here: the groups GLi 
and the Pell conies are special norm tori in the theory of algebraic groups, and 
there's the question of how much of the above carries over to the more general 
situation. The norm-1 tori associated to pure cubic fields can be described geomet- 
rically as cubic surfaces S; do the groups of integral points on S admit a geometric 
group law? It is known that the groups of rational points on cubic surfaces coming 
from norm forms satisfy the Hasse principle; is there a connection between the 3- 
class groups of these fields and the Tate-Shafarevich groups on S defined as above 
as the obstruction to lifting the Hasse principle from rational to integral points? 

On the elliptic curve side, there are a few questions suggested by the analogy 
worked out in this article. For example, is there a natural group whose order 
equals #in(_E) • n*^?? Recall that exp{h{P)) is algebraic for rational points on 
Pell conies; are there meromorphic functions F such that F{h{P)) is algebraic for 
rational points P on elliptic curves, at least for curves with complex multiplication? 
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